This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft File: HpqS2vCMILRpG5Jc8DLlSR_grMA.mft (raw, json) Hash identifier: 7k4YisSq++/lze9LoTEkHbEMtHnfKVBjcLCchMJpRHI= Subject key identifier: 97:D3:11:58:DC:B4:6D:BC:17:6C:5E:E3:55:35:2F:2C:11:BD:95:F4 Authority key identifier: 1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0 Certificate issuer: /CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0 Certificate serial: 019B3B351C371CAE99FB26C138DA0EFDD7EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft Manifest number: 1355 Signing time: Sat 20 Dec 2025 10:01:34 +0000 Manifest this update: Sat 20 Dec 2025 10:01:34 +0000 Manifest next update: Sun 21 Dec 2025 10:01:34 +0000 Files and hashes: 1: ACKW9RfobgNxFmGLo0q9xAh_d6k.roa (hash: sd4MSbt7R4RMvGdT2hp/M6b7EN9LmdrjGUMed4jtMaw=) 2: HpqS2vCMILRpG5Jc8DLlSR_grMA.crl (hash: 8Sano0YybvmLr91PdJo//a/yfSlj9+0zQJGeyiA3En8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:1c:37:1c:ae:99:fb:26:c1:38:da:0e:fd:d7:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e9a92daf08c20b4691b925cf032e5491fe0acc0 Validity Not Before: Dec 20 10:01:34 2025 GMT Not After : Dec 21 10:01:34 2025 GMT Subject: CN=97d31158dcb46dbc176c5ee355352f2c11bd95f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cb:71:a8:c8:0e:90:55:d0:ea:61:4c:6f:56: 11:17:8f:2a:69:5c:ac:07:bd:a7:e6:26:95:60:27: 2a:d8:05:11:dd:4c:4a:19:40:29:3d:02:79:65:ff: db:75:94:2a:c1:96:c3:c6:64:18:eb:95:4f:ce:ba: 51:ae:fb:24:06:f1:c5:48:d4:64:15:2b:af:4e:b2: c8:78:34:84:57:95:4d:f7:78:5b:eb:28:80:be:15: 1f:6c:f0:68:4d:99:ef:21:68:69:fe:31:a4:ee:79: fc:70:e1:e9:a3:d0:a5:9d:e5:eb:2e:8c:47:2d:f7: 71:92:21:71:0c:18:97:a5:5a:9b:be:ab:19:f7:6a: 83:82:9f:a1:03:24:89:cf:df:e7:64:2f:c0:4c:64: 1a:c2:a9:b6:6d:a9:f4:93:00:90:18:8f:d0:04:2a: 6b:31:e1:ba:27:55:85:f0:d9:8b:c4:db:1a:55:6e: 73:98:75:f5:13:bc:15:e9:d0:a9:3a:5b:b0:1a:45: a8:20:61:23:2f:e6:ac:2c:10:8c:fc:33:2b:cd:c8: a1:b9:4a:ff:6c:77:63:c7:f1:1a:05:00:aa:c5:fa: 48:17:27:f3:7f:fd:fe:53:01:b9:4d:64:df:7c:8d: 6f:ff:c0:1b:6e:b9:df:32:51:8a:d0:a0:2e:1a:07: ef:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D3:11:58:DC:B4:6D:BC:17:6C:5E:E3:55:35:2F:2C:11:BD:95:F4 X509v3 Authority Key Identifier: keyid:1E:9A:92:DA:F0:8C:20:B4:69:1B:92:5C:F0:32:E5:49:1F:E0:AC:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpqS2vCMILRpG5Jc8DLlSR_grMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c14115-8cf8-40c8-87c8-ce82ebe11ac8/1/HpqS2vCMILRpG5Jc8DLlSR_grMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:c1:f5:d6:29:e5:3a:96:26:64:2e:1b:67:b6:f3:59:c1:39: e7:1b:7a:05:e4:a1:12:a3:c4:2b:34:3b:cf:1b:ed:2e:5b:9b: 59:6f:e7:ca:4b:45:42:3d:5d:87:00:f8:07:8d:99:0e:d2:76: 42:9b:40:95:fb:ff:11:0a:d4:9a:bb:5b:7c:e4:19:34:00:e2: 6a:64:ea:5f:38:63:63:5d:9c:1a:11:c5:b2:89:98:71:24:bc: 85:b8:0d:88:bf:70:d3:49:06:c4:8d:6a:4d:77:58:69:0d:65: 20:91:36:2c:01:2a:e3:1e:2c:75:53:bf:15:ba:f9:ff:1f:31: 68:29:1b:e5:a5:c1:58:a1:78:0a:cf:76:46:85:54:47:3f:45: 18:a9:e7:50:aa:6b:28:13:81:fe:8b:96:03:d9:c1:7d:d0:17: 0b:8d:da:d9:dc:bd:1b:7c:54:a9:51:db:f3:af:ee:1e:37:38: 0f:a8:8e:0c:ff:07:80:7c:d5:f5:c8:05:bf:55:97:c2:91:1d: a6:18:f1:ef:56:ec:a2:20:68:0a:ff:3f:09:52:4c:63:1f:9f: 4b:81:30:4a:d6:cf:92:a7:06:f8:5e:a9:57:cb:30:a0:d0:50: 33:07:d3:c1:c6:43:61:2b:99:27:ac:8d:49:d6:9d:55:3d:26: 26:ea:f8:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NRw3HK6Z+ybBONoO/dfqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOWE5MmRhZjA4YzIwYjQ2OTFiOTI1Y2YwMzJlNTQ5MWZl MGFjYzAwHhcNMjUxMjIwMTAwMTM0WhcNMjUxMjIxMTAwMTM0WjAzMTEwLwYDVQQD Eyg5N2QzMTE1OGRjYjQ2ZGJjMTc2YzVlZTM1NTM1MmYyYzExYmQ5NWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMtxqMgOkFXQ6mFMb1YRF48qaVys B72n5iaVYCcq2AUR3UxKGUApPQJ5Zf/bdZQqwZbDxmQY65VPzrpRrvskBvHFSNRk FSuvTrLIeDSEV5VN93hb6yiAvhUfbPBoTZnvIWhp/jGk7nn8cOHpo9ClneXrLoxH LfdxkiFxDBiXpVqbvqsZ92qDgp+hAySJz9/nZC/ATGQawqm2ban0kwCQGI/QBCpr MeG6J1WF8NmLxNsaVW5zmHX1E7wV6dCpOluwGkWoIGEjL+asLBCM/DMrzcihuUr/ bHdjx/EaBQCqxfpIFyfzf/3+UwG5TWTffI1v/8AbbrnfMlGK0KAuGgfvFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfTEVjctG28F2xe41U1LywRvZX0MB8GA1UdIwQY MBaAFB6aktrwjCC0aRuSXPAy5Ukf4KzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jMTQxMTUtOGNmOC00MGM4LTg3Yzgt Y2U4MmViZTExYWM4LzEvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9jMTQxMTUtOGNmOC00MGM4LTg3YzgtY2U4MmViZTExYWM4 LzEvSHBxUzJ2Q01JTFJwRzVKYzhETGxTUl9nck1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesH11inl OpYmZC4bZ7bzWcE55xt6BeShEqPEKzQ7zxvtLlubWW/nyktFQj1dhwD4B42ZDtJ2 QptAlfv/EQrUmrtbfOQZNADiamTqXzhjY12cGhHFsomYcSS8hbgNiL9w00kGxI1q TXdYaQ1lIJE2LAEq4x4sdVO/Fbr5/x8xaCkb5aXBWKF4Cs92RoVURz9FGKnnUKpr KBOB/ouWA9nBfdAXC43a2dy9G3xUqVHb86/uHjc4D6iODP8HgHzV9cgFv1WXwpEd phjx71bsoiBoCv8/CVJMYx+fS4EwStbPkqcG+F6pV8swoNBQMwfTwcZDYSuZJ6yN SdadVT0mJur46w== -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:28 2025 by rpki-client